From 57711a0c9b008b28a01734a6e140aab5c26a83c2 Mon Sep 17 00:00:00 2001 From: Wojciech Tyczynski Date: Fri, 27 Jan 2017 15:17:07 +0100 Subject: [PATCH] Update secrets doc --- docs/user-guide/secrets/index.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/docs/user-guide/secrets/index.md b/docs/user-guide/secrets/index.md index 7da0f446fd..8388dac53f 100644 --- a/docs/user-guide/secrets/index.md +++ b/docs/user-guide/secrets/index.md @@ -370,7 +370,10 @@ files. **Mounted Secrets are updated automatically** When a secret being already consumed in a volume is updated, projected keys are eventually updated as well. -The update time depends on the kubelet syncing period. +Kubelet is checking whether the mounted secret is fresh on every periodic sync. +However, it is using its local ttl-based cache for getting the current value of the secret. +As a result, the total delay from the moment when the secret is updated to the moment when new keys are +projected to the pod can be as long as kubelet sync period + ttl of secrets cache in kubelet. #### Optional Secrets as Files from a Pod